d034a96e42f8c00c355dec50c1b54ecbe5423ccaaaa89f4af347552b4b4cd36a

General

Target

d034a96e42f8c00c355dec50c1b54ecbe5423ccaaaa89f4af347552b4b4cd36a
Size

1.1MB
MD5

1239a824625676b23aa6bfe42e021c3e
SHA1

3f1aa282c84733be0f23e193dae133538f0fcedc
SHA256

d034a96e42f8c00c355dec50c1b54ecbe5423ccaaaa89f4af347552b4b4cd36a
SHA512

213f808e588213b5dcc697e7f4f337039ca42fad7ec534d114a87057aea16915cc03bda1ec3edcfe5864aebf3a32d8a5b0de841c8bd695877d426ad0233376b9
SSDEEP

24576:7tK4SvD5AeYb0QXdJMr97J9pmduZwiWwwgsb:71SvDTYoQJg97Cumnwsb

Score

N/A

Malware Config

Signatures

Files

d034a96e42f8c00c355dec50c1b54ecbe5423ccaaaa89f4af347552b4b4cd36a
.exe windows x86

15b9549097e6154d2f4ecfb0183a5df1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
GetVersionExA
DisableThreadLibraryCalls
UnhandledExceptionFilter
IsDebuggerPresent
WaitForSingleObject
SystemTimeToTzSpecificLocalTime
SetEvent
ReleaseMutex
GetProcAddress
GetAtomNameA
FileTimeToSystemTime
CreateMutexA
CreateEventA
VirtualAlloc
AddAtomA
WideCharToMultiByte
VirtualQuery
TlsGetValue
Sleep
QueryPerformanceCounter
MultiByteToWideChar
LoadLibraryA
LeaveCriticalSection
GetSystemTimeAsFileTime
GetModuleHandleA
GetLastError
FreeLibrary
DeleteCriticalSection
CreateFileA
WriteFile
DeleteFileA
RemoveDirectoryA
CloseHandle
lstrcmpiW

advapi32

RegOpenKeyExA
OpenProcessToken

msvcrt

exit
time
strrchr
strncpy
sscanf
mktime
memset
localtime
gmtime
asctime
strlen
strerror
strcpy
strcmp
strchr
malloc
getenv
fwrite
free
fclose
calloc
abort
strtoul
isprint
printf

crypt32

CertGetPublicKeyLength
CertFreeCertificateContext

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15b9549097e6154d2f4ecfb0183a5df1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

msvcrt

crypt32

Sections

.text Size: 120KB - Virtual size: 116KB

.rdata Size: 80KB - Virtual size: 76KB

.data Size: 32KB - Virtual size: 2.2MB

.rsrc Size: 28KB - Virtual size: 26KB

.text
Size: 120KB - Virtual size: 116KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 32KB - Virtual size: 2.2MB

.rsrc
Size: 28KB - Virtual size: 26KB